CVE-2005-4223

HIGH 7.5CVE-2005-4223 · Published 14/12/2005 · updated 16/06/2026

In short

CVE-2005-4223 is a HIGH (CVSS 7.5) vulnerability affecting utopia news pro (utopia software).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
utopia news pro utopia_software	`= 1.1.4`	No fix yet

Description

Multiple "potential" SQL injection vulnerabilities in Utopia News Pro (UNP) 1.1.4 might allow remote attackers to execute arbitrary SQL commands via (1) the newsid parameter in editnews.php, (2) the catid and question parameters in faq.php, (3) the poster parameter in postnews.php, (4) the tempid parameter in templates.php, and (5) the userid and groupid parameters in users.php.

References

glide.stanford.edu/yichen/research/sec.pdf
secunia.com/advisories/17988 · Patch
osvdb.org/21645 · Patch
osvdb.org/21646 · Patch
osvdb.org/21647 · Patch
osvdb.org/21648 · Patch
osvdb.org/21649 · Patch
securityfocus.com/archive/1/419280/100/0/threaded
securityfocus.com/archive/1/419487/100/0/threaded
vupen.com/english/advisories/2005/2859
exchange.xforce.ibmcloud.com/vulnerabilities/23564

More vulnerabilities in utopia news pro

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free